Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa
File:                     5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa (raw, json)
Hash identifier:          /I/q9aYopNZnRNyOaNAd2c5BmGCZZwjd0KC1jECY+5Q=
Subject key identifier:   4A:C3:07:79:FA:00:F6:8B:D3:51:CC:CB:AA:72:E4:92:B9:4E:E7:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69EAAF14DCB5A934CC71C2D3B7A1D04D78FEDB58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa
Signing time:             Mon 24 Mar 2025 15:41:58 +0000
ROA not before:           Mon 24 Mar 2025 15:41:58 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.226.222.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ea:af:14:dc:b5:a9:34:cc:71:c2:d3:b7:a1:d0:4d:78:fe:db:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 24 15:41:58 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:7f:9d:0b:c6:37:eb:ac:de:c3:a7:f1:56:
                    b8:62:6f:50:6c:23:33:7f:aa:05:a7:10:86:49:df:
                    27:1c:b1:4b:3e:56:c2:49:22:04:82:3d:50:04:08:
                    90:db:96:b0:f7:f3:36:f1:1e:4f:26:df:e4:81:e1:
                    de:4e:6f:12:e9:fc:a0:e4:49:6a:13:47:72:fd:6d:
                    0a:49:f8:02:67:16:52:0c:8d:b5:03:55:82:8c:24:
                    87:87:2a:2f:63:98:18:04:92:86:82:45:df:2c:0a:
                    ff:2a:3c:4f:33:3e:c0:f7:99:1b:55:b8:71:78:e5:
                    0f:82:af:99:b4:f6:ba:6e:c5:b5:a9:bb:8b:73:aa:
                    b7:80:3d:b2:d3:68:50:4c:2c:25:2c:63:c7:c1:f1:
                    69:55:b0:52:c4:0f:2c:5d:b1:a7:91:0f:16:23:6e:
                    d3:c3:7f:ab:de:1f:19:ba:37:5f:04:1d:3b:8d:ce:
                    0f:82:8d:b8:b9:28:54:66:25:6a:7f:b7:f2:e3:33:
                    b3:9d:4b:e1:a4:c9:77:54:14:37:eb:ac:75:50:a3:
                    da:c6:cf:8a:9c:b2:16:b2:fb:2e:f8:c9:a5:b0:35:
                    63:62:ce:cb:c4:87:2d:e2:87:9d:6d:49:10:4d:c5:
                    aa:45:4c:2b:87:38:c1:d8:2e:b5:0e:e5:fd:2d:4e:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C3:07:79:FA:00:F6:8B:D3:51:CC:CB:AA:72:E4:92:B9:4E:E7:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:cb:2e:9d:f5:c7:3c:37:20:64:2d:1d:25:33:2e:df:94:
         6d:6d:77:be:ac:71:73:6c:38:55:d8:90:e7:f1:ed:a9:bc:a0:
         01:3b:6d:a3:e1:3f:51:26:c2:ca:7d:96:10:fc:eb:b2:28:d6:
         c8:6b:ec:9f:29:70:40:04:fb:9d:08:de:f8:45:66:77:05:95:
         dd:6f:c1:06:fc:ab:55:d8:e2:f4:60:32:65:ee:cd:ef:19:27:
         53:4c:45:21:36:44:c4:6f:25:f0:9d:da:4d:82:2d:70:ec:60:
         69:a2:8a:c2:7c:e4:68:bd:3c:09:4b:1b:23:11:c1:78:9a:ad:
         40:3a:21:58:6a:32:54:73:ae:76:80:70:ea:3b:d9:cd:58:e0:
         2e:07:0c:a5:67:30:9f:48:a3:c6:ee:f0:0a:73:9d:52:da:e6:
         5a:16:d5:15:7f:2e:50:bc:a4:69:36:50:9b:f0:f3:f5:3e:6a:
         db:f1:84:73:43:a4:90:a2:b6:3f:f5:0c:eb:8b:e9:7d:7f:d3:
         6f:2c:eb:03:cc:ce:c1:cd:ee:9a:b3:02:e6:32:4a:e5:a3:a4:
         3d:ab:29:34:38:6b:d9:87:5f:c0:b5:12:f6:d2:91:c7:61:9e:
         b8:38:ca:b4:08:49:fd:a5:23:96:61:15:26:92:e6:25:55:da:
         de:54:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----